CVE-2018-10027

ESTsoft ALZip before 10.76 allows local users to execute arbitrary code via creating a malicious .DLL file and installing it in a specific directory…

published May 17, 2018

CVSS
—
EPSS
0%
Percentile
36.5
In the wild
Unconfirmed
What it is

ESTsoft ALZip before 10.76 allows local users to execute arbitrary code via creating a malicious .DLL file and installing it in a specific directory: %PROGRAMFILES%\ESTsoft\ALZip\Formats, %PROGRAMFILES%\ESTsoft\ALZip\Coders, %PROGRAMFILES(X86)%\ESTsoft\ALZip\Formats, or %PROGRAMFILES(X86)%\ESTsoft\ALZip\Coders.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00432 · 36.5th percentile
Published
2018-05-17T12:00Z
EPSS history
Timeline
  • 17 MAY 12:00Z
    ESTsoft ALZip before 10.76 allows local users to execute arbitrary code via creating a malicious .DLL file and installing it in a specific directory…
    cvelistv5